
$ rpki-client -vvf rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.mft
File: 25678997D666BF9281FFEAB78B6D28A1FA51FF78.mft (raw, json)
Hash identifier: PUbfZKBm7FVQHXGMLmyBEW900pmo7bD94LO1TTuIKu4=
Subject key identifier: CE:39:05:9D:55:BA:EF:74:82:6B:AB:E5:C5:49:14:78:B6:3C:7A:26
Authority key identifier: 25:67:89:97:D6:66:BF:92:81:FF:EA:B7:8B:6D:28:A1:FA:51:FF:78
Certificate issuer: /CN=25678997D666BF9281FFEAB78B6D28A1FA51FF78
Certificate serial: 3317EB8946D29F1B35205C02B88BC2A1BC2DDB4B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.mft
Manifest number: 03D1
Signing time: Wed 08 Apr 2026 10:01:13 +0000
Manifest this update: Wed 08 Apr 2026 09:56:13 +0000
Manifest next update: Thu 09 Apr 2026 10:23:13 +0000
Files and hashes: 1: 323830343a336566383a3a2f33322d3430203d3e20323636363332.roa (hash: HtSVNo2VwQezrWl8f2rm80yFGSuOgotkpvP/IOvnHck=)
2: 25678997D666BF9281FFEAB78B6D28A1FA51FF78.crl (hash: Cqs86fNsdJro7WCF739ne4YlNnfz5ExwWYo5fw4REPw=)
3: 3132382e3230312e3134382e302f32322d3234203d3e20323636363332.roa (hash: Fu7wEATfSK1ET1FmkXXEOADFKlQHr6FL2JqyUkBL8iU=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.crl
rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 09 Apr 2026 10:23:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:17:eb:89:46:d2:9f:1b:35:20:5c:02:b8:8b:c2:a1:bc:2d:db:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25678997D666BF9281FFEAB78B6D28A1FA51FF78
Validity
Not Before: Apr 8 09:56:13 2026 GMT
Not After : Apr 9 10:23:13 2026 GMT
Subject: CN=CE39059D55BAEF74826BABE5C5491478B63C7A26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c0:53:8a:03:2b:b5:25:4a:32:13:af:2c:5a:
86:a0:ee:5e:6d:43:71:a1:6c:2e:cd:c4:e7:4a:47:
22:0d:3b:60:0f:61:cd:eb:cc:eb:08:5e:dd:97:35:
41:0b:fe:c9:d5:47:80:eb:87:e5:ee:87:d1:87:4e:
f1:29:b1:6b:7e:d0:8b:88:81:1c:f3:fb:24:86:ea:
e5:52:65:86:5f:7d:e1:b2:9e:bf:c0:75:85:f8:64:
4a:b1:6b:e9:22:e5:0f:7f:cb:df:25:3d:4e:c2:f2:
3c:9e:5a:5e:c0:13:f3:60:ac:28:30:cd:a5:92:64:
11:06:cf:8e:6a:1a:10:ac:e9:60:cc:ee:45:30:1c:
b0:4b:4c:ce:79:25:a1:1c:89:2d:f2:b8:83:2e:fc:
2d:d8:54:65:4f:6c:85:2a:e1:c7:89:ca:c3:15:5a:
35:de:2e:b8:65:a5:a9:b6:69:af:0c:37:ff:eb:45:
c3:60:25:94:89:aa:25:51:49:96:d5:da:fd:4f:87:
7e:a6:72:ec:ff:0c:b8:6a:7c:aa:6a:84:57:24:d4:
50:dd:a9:1a:8b:5f:17:d8:ac:75:01:d2:81:21:7d:
77:49:4d:2d:6b:eb:cb:1c:50:7d:f1:cc:95:82:5a:
4f:2a:82:ba:7f:f0:9c:9f:66:11:5b:6d:d8:29:2e:
c7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:39:05:9D:55:BA:EF:74:82:6B:AB:E5:C5:49:14:78:B6:3C:7A:26
X509v3 Authority Key Identifier:
keyid:25:67:89:97:D6:66:BF:92:81:FF:EA:B7:8B:6D:28:A1:FA:51:FF:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:31:22:b7:a3:4f:82:cb:49:2e:c3:33:56:8e:65:5e:ec:8e:
b7:5b:18:54:95:7c:01:e5:72:71:1d:9c:27:1c:ef:a1:ce:d4:
61:af:9b:7a:9a:ca:7a:17:18:7b:08:df:38:ba:dc:99:48:1d:
9a:71:57:28:2a:73:c2:3b:1b:07:6c:a5:c4:99:c6:a3:e6:e7:
ba:47:28:91:af:f3:05:10:de:d3:82:2e:f9:45:e9:2c:15:ac:
4a:73:e1:35:be:4c:d7:cf:45:4f:3a:2c:9d:62:ec:99:1c:d2:
42:54:79:60:71:ea:5a:d4:4a:b9:3b:d9:17:00:41:fb:d5:55:
72:e4:1e:bb:1e:17:4e:78:ef:8c:9a:be:ff:8e:b8:66:5b:1d:
41:90:65:6c:17:3a:b3:c4:08:62:a6:1c:9a:6b:78:c0:ad:0f:
15:e1:15:2f:ca:49:62:ff:33:f1:e4:f2:c9:33:64:7d:fa:1a:
d2:35:7e:ca:60:e8:6d:ea:52:70:0e:2f:83:bc:3b:cd:8c:52:
83:61:06:ff:0a:ee:41:5c:2f:ee:24:e9:73:65:55:61:aa:97:
9f:cf:1b:b0:0c:53:09:5a:6c:a1:ab:2d:71:9c:9d:3b:78:73:
71:ec:f1:7a:95:62:83:1d:07:f2:eb:bf:37:29:64:ee:7d:e0:
a4:71:26:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 17:46:36 2026 by rpki-client